This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: xUmXf/pCy8q59W4+ZgPctZ3JeNjGuLRSCMm1CiiDwfQ= Subject key identifier: 55:02:78:02:4E:AF:F3:4C:45:C7:BC:70:56:04:84:86:CB:39:8B:52 Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: 9D Signing time: Fri 05 Dec 2025 04:21:42 +0000 Manifest this update: Fri 05 Dec 2025 04:21:41 +0000 Manifest next update: Fri 12 Dec 2025 04:21:41 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: UsQl1fy+A+6pLp3ZryhZvTGqqkIZZXPO3YbQMWtaxNY=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 8xExEFAiYA/8lFGHuqLYzWCAWTLUpOx+eEmK9KK5c0M=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: 2GRtPqItvUjTSj4+s6HmnNB8Os7tS39gLre6A6tNJzo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: Dec 5 04:21:41 2025 GMT Not After : Dec 12 04:21:41 2025 GMT Subject: CN=69325dd5-6a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:2d:35:eb:da:31:de:ca:20:35:45:16:ef: f5:6b:11:44:10:7c:6a:d3:87:b2:6c:5c:6c:57:07: b0:3f:0f:3a:13:1b:9f:62:1a:be:44:66:b8:31:01: f7:e9:f4:4d:7e:dd:f3:f3:78:52:d1:1c:b1:98:3b: 12:3e:ee:b4:01:bf:ab:00:68:c9:8a:19:f5:2f:f7: e5:77:d1:52:72:e5:21:83:10:9f:0a:37:80:8d:a7: 5d:8b:46:ac:5d:94:28:bc:7f:02:f4:78:b4:5e:df: 1a:f9:67:95:2b:31:f2:a0:9d:18:7c:f0:67:9c:a2: df:62:f9:d9:04:a2:ae:89:72:4c:43:22:16:da:d8: 07:1d:ec:da:82:5c:c8:da:9e:7c:80:57:9c:7b:82: 19:9e:f4:0b:58:45:bb:82:41:5e:93:93:17:c7:71: 84:4c:90:cb:3e:1c:ef:c3:fb:8d:f7:44:e3:31:39: bc:53:03:eb:9e:e3:1b:fb:01:a0:29:06:b5:21:de: f3:0b:c4:b3:bd:84:b4:d9:d2:5e:de:97:78:82:48: f0:f2:39:38:73:03:fa:d2:1a:16:d8:85:d3:5d:9c: d2:ea:50:4b:85:10:e3:31:d5:10:0d:ec:71:1f:33: b7:26:34:45:41:fe:63:a4:63:0b:70:5d:45:3a:14: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:78:02:4E:AF:F3:4C:45:C7:BC:70:56:04:84:86:CB:39:8B:52 X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1e:5c:b9:3b:e0:ca:6f:6b:44:37:86:a5:49:b0:c3:15:53: b1:b0:31:05:d6:6e:88:75:88:41:6a:2a:2c:1d:5b:f2:73:7d: f5:93:4b:66:6b:87:a8:6f:85:1b:0d:4a:68:c7:ab:aa:41:a8: 95:20:d2:f6:73:cd:01:e9:8e:80:9d:f9:5d:f1:c6:ae:e0:65: e3:54:5a:56:ea:ce:16:25:68:27:68:7d:22:5f:1e:7f:e7:f9: da:8c:36:4d:15:9b:9c:da:d4:a9:56:f4:3d:ad:08:8e:20:3d: ec:f7:41:0c:c1:c7:d6:6c:8b:b5:c9:25:97:f9:c0:a3:90:27: 7d:72:15:bc:f4:68:b2:d5:84:a8:8d:cc:1f:2e:61:0c:f0:cd: 3e:6b:5b:93:60:f0:f9:5d:b2:41:5a:03:cb:f5:a0:36:3a:c4: 56:b4:05:6b:30:d6:0e:95:55:ef:74:24:7c:9a:4f:c2:88:fa: d9:46:eb:75:bd:1d:41:76:2e:b3:db:b0:39:32:dd:cc:5c:b4: ef:00:3f:d8:90:92:5f:ac:1f:07:0b:19:8c:9c:d0:77:88:4d: 59:56:f1:b6:46:38:5a:e2:98:be:47:23:55:6a:a4:c2:81:00: df:03:e8:08:ce:4f:f9:98:b8:a6:40:2f:5b:dd:de:7e:f0:e4: dc:e1:b8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2 ODIxOEExNTYwHhcNMjUxMjA1MDQyMTQxWhcNMjUxMjEyMDQyMTQxWjAYMRYwFAYD VQQDEw02OTMyNWRkNS02YTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKItNevaMd7KIDVFFu/1axFEEHxq04eybFxsVwewPw86ExufYhq+RGa4MQH3 6fRNft3z83hS0RyxmDsSPu60Ab+rAGjJihn1L/fld9FScuUhgxCfCjeAjaddi0as XZQovH8C9Hi0Xt8a+WeVKzHyoJ0YfPBnnKLfYvnZBKKuiXJMQyIW2tgHHezaglzI 2p58gFece4IZnvQLWEW7gkFek5MXx3GETJDLPhzvw/uN90TjMTm8UwPrnuMb+wGg KQa1Id7zC8SzvYS02dJe3pd4gkjw8jk4cwP60hoW2IXTXZzS6lBLhRDjMdUQDexx HzO3JjRFQf5jpGMLcF1FOhQPywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUCeAJO r/NMRce8cFYEhIbLOYtSMB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4 NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTU1Ny85MjY4M0UzQUU4NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4 M19tek9VMHpWWFpvSVlvVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBHly5O+DKb2tEN4alSbDDFVOxsDEF1m6IdYhBaiosHVvyc331k0tm a4eob4UbDUpox6uqQaiVINL2c80B6Y6Anfld8cau4GXjVFpW6s4WJWgnaH0iXx5/ 5/najDZNFZuc2tSpVvQ9rQiOID3s90EMwcfWbIu1ySWX+cCjkCd9chW89Giy1YSo jcwfLmEM8M0+a1uTYPD5XbJBWgPL9aA2OsRWtAVrMNYOlVXvdCR8mk/CiPrZRut1 vR1Bdi6z27A5Mt3MXLTvAD/YkJJfrB8HCxmMnNB3iE1ZVvG2Rjha4pi+RyNVaqTC gQDfA+gIzk/5mLimQC9b3d5+8OTc4bgs -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:11 2025 by rpki-client